Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory. This allows attackers to gain unauthorized access to protected information, execute arbitrary code, or cause system failures.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the operation of writing data beyond the buffer in memory when processing STP format files with the ASMIMPORT228A.dll library. Exploiting this vulnerability can allow an attacker to gain unauthorized...

PT-2024-7765

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted 3DM file can cause a memory corruption issue when parsed through Autodesk applications using opennurbs.dll and ASMkern229A.dll, potentially leading to code...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory. This allows attackers to gain unauthorized access to protected information, execute arbitrary code, or cause system failures.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the operation of writing data beyond the buffer boundaries in memory when processing an SLDPRT file with the ODXSWDLL.dll library. Exploiting this vulnerability can allow an attacker to gain unauthoriz...

Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0004)

The version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2024.1.3, 2023.1.5, 2022.1.4 or 2021.1.4. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted STP, CATPART or MODEL file in ASMKERN228A.dll when parsed through Autodesk AutoCAD c...

PT-2024-8188

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a maliciously crafted X B or X T file that can cause an Out-of-Bound Read when parsed in pskernel.DLL through Autodesk applications. This can allow a...

PT-2024-8192

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted SLDPRT file can cause a use-after-free issue when parsed in ASMKERN229A.dll through Autodesk applications. This could lead to code execution in the current...

PT-2024-7767

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted IGES file can cause a use-after-free issue when parsed in ASMImport229A.dll through Autodesk applications. This can be leveraged by a malicious actor to cause a...

PT-2024-8185

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to an out-of-bounds read in the ODXSW DLL.dll library of Autodesk AutoCAD, caused by a maliciously crafted SLDDRW file. This can allow a remote attacker to gai...

CVE-2024-23134

A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2024-23135

A maliciously crafted SLDPRT file in ASMkern228A.dll when parsed through Autodesk applications can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2024-23136

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2024-23137

A maliciously crafted STP or SLDPRT file, when parsed in ODXSWDLL.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

Design/Logic Flaw

A maliciously crafted IGS file when tbb.dll parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

Design/Logic Flaw

A maliciously crafted SLDPRT file when ASMkern228A.dll parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

Null pointer dereference

A maliciously crafted STP file when ASMKERN228A.dll parsed through Autodesk AutoCAD can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

Security feature bypass

A maliciously crafted STP or SLDPRT file when ODXSWDLL.dll parsed through Autodesk AutoCAD can be used to uninitialized variable. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2024-23137

Autodesk AutoCAD contains CVE-2024-23137: a maliciously crafted STP or SLDPRT file processed by ODXSW_DLL.dll can cause uninitialized memory access, enabling code execution in the current process. Multiple related advisories (including ZDI-24-745 and RH notices) describe this as a parsing/initial...

CVE-2024-23136 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2024-23136

Autodesk AutoCAD is affected by CVE-2024-23136 due to a malicious STP file parsed by ASMKERN228A.dll that can cause a dereference of an untrusted pointer, potentially enabling code execution in the current process. The CVSS indicates local access, no privileges required, user interaction required...

CVE-2024-23136 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...